DeutschShown in its original language — a full translation is planned for a future version.
Red Hat OpenStack: Mehrere Schwachstellen
view advisory published 2022-07-20
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-30323US | high8.6 | — | ||
go-getter up to 1.5.11 and 2.0.2 panicked when processing password-protected ZIP files. Fixed in 1.6.1 and 2.1.0. | ||||
| CVE-2022-30322US | high8.6 | — | ||
go-getter up to 1.5.11 and 2.0.2 allowed asymmetric resource exhaustion when go-getter processed malicious HTTP responses. Fixed in 1.6.1 and 2.1.0. | ||||
| CVE-2022-30321US | high8.6 | — | ||
go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws. Fixed in 1.6.1 and 2.1.0. | ||||
| CVE-2022-26945US | critical9.8 | — | ||
go-getter up to 1.5.11 and 2.0.2 allowed protocol switching, endless redirect, and configuration bypass via abuse of custom HTTP response header processing. Fixed in 1.6.1 and 2.1.… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2022:5069 vom 2022-08-10external
- Red Hat Security Advisory RHSA-2022:5673 vom 2022-07-20external
- Red Hat Security Advisory RHSA-2022:6133 vom 2022-08-31external
- Red Hat Security Advisory RHSA-2022:6147 vom 2022-09-01external
- Red Hat Security Advisory RHSA-2022:6258 vom 2022-09-08external
- Red Hat Security Advisory RHSA-2022:6308 vom 2022-09-15external
- Red Hat Security Advisory RHSA-2022:6801 vom 2022-10-13external
- Red Hat Security Advisory RHSA-2022:6805 vom 2022-10-12external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan